IPSec AH or ESP in tunnel mode

Share

When using IPSec with tunneled mode-AH or tunneled mode-ESP, what are the new SRC and DST IP address used to construct the IPSec's outer IP HDR ? And Why ? And how does Cisco (and other vendors) do this ? What are the Cisco command to use ? Thanks !